W&T Microwall Gigabit 55210, Руководство пользователя

Страница: 50 / 75

50
W&T
Security & Maintenanceh
6�1 Security notes
The following sections contain relevant notes and recommen-
dations from an IT security perspective for commissioning,
configuration, operation and maintenance of the Microwall.
6�1�1 Function
The Microwall is a small firewall designed as a router with
two Ethernet ports and an integrated WireGuard VPN server.
The typical application is to decouple a network island from
a higher-level intranet and to allow only connections that are
explicitly permitted by a whilelist-based firewall. For the pur-
pose of remote maintenance, it is possible to allow access to
participants on the network island and the management inter-
face of the Microwall via the VPN server.
6�1�2 Installation location
The installation location of the Microwall must ensure that no
unauthorized physical access can occur (e.g. suitably secured
room or network cabinet). Physical access to the Microwall
entails the following risks, for example:
- Decommissioning of the device (removal of network cable,
power supply ...) and loss of all connections to the partici-
pants of the island network
- Start emergency access of the Microwall via the service but-
ton and thus deactivate or change the password. An attacker
gets full access to the management interface and is able to
create firewall rules or create unauthorized VPN clients.
6�1�3 Start-up
The start-up of a Microwall is divided into the assignment of
an IP address with the WuTility tool and the subsequent call
of the initial web page with the configuration of the password
and the network-side basic parameters. Only after this step is